Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-1000250

Опубликовано: 12 сент. 2017
Источник: nvd
CVSS3: 6.5
CVSS2: 3.3
EPSS Низкий

Описание

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*
Версия до 5.46 (включая)

EPSS

Процентиль: 94%
0.07774
Низкий

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 9 лет назад

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

CVSS3: 6.5
redhat
почти 9 лет назад

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

CVSS3: 6.5
debian
почти 9 лет назад

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerabl ...

CVSS3: 6.5
github
около 4 лет назад

All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.

oracle-oval
почти 9 лет назад

ELSA-2017-2685: bluez security update (MODERATE)

EPSS

Процентиль: 94%
0.07774
Низкий

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-200